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Abstract 

The F5 algorithm Faugere (2002) is generally believed as one of the fastest algorithms for com- 
puting Grobner bases. However, its termination problem is still unclear. Recently, an algorithm 
GVW Gao et al. (2010) and its variant GVWHS Volny IV (2011) have been proposed, and their 
efficiency are comparable to the F5 algorithm. In the paper, we clarify the concept of an ad- 
missible module order. For the first time, the connection between the reducible and rewritable 
check is discussed here. We show that the top-reduced S- Grobner basis must be finite if the 
admissible monomial order and the admissible module order are compatible. Compared with 
Volny IV (2011), this paper presents a complete proof of the termination and correctness of 
the GVWHS algorithm. What is more, it can be seen that the GVWHS is in fact an F5-like 
algorithm. Different from the GVWHS algorithm, the F5B algorithm may generate redundant 
sig-polynomials. Taking into account this situation, we prove the termination and correctness 
of the F5B algorithm. And we notice that the original F5 algorithm in Faugere (2002) slightly 
differs from the F5B algorithm in the insertion strategy on which the F5-rewritten criterion is 
based. Exploring the potential ordering of sig-polynomials computed by the original F5 algo- 
rithm, we propose an F5GEN algorithm with a generalized insertion strategy, and prove the 
termination and correctness of it. Therefore, we have a positive answer to the long standing 
problem of proving the termination of the original F5 algorithm. 
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1. Introduction 

In cryptography, the cipher of a cryptosystem sometimes can be transformed into a 
system of equations. Solving a set of multivariate polynomial equations (nonlinear and 
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randomly chosen) over a finite field is an NP-hard pr oblem Garev and Johnson ( 19791 ) . 



Based on which, Albrecht et al. lAlbrecht et al.l (|2011|) constructed a Polly-Cracker-style 
cryptosystem. However, in much more cases a designer has to embed some kind of trap- 
door function to enable efficient decryption and signing. Although the structure of the 
cipher is hidden, the equations are so special that one can exploit them via Grobner basis 
based techniques to att ack the cryptosyst em. 

In 1965 Buchberger's lBuchberger ( 19651 ) thesis he described the appropriate framework 
for the study of polynomial ideals, with the introduction of Grobner bases. Since then, 
Grobner basis has become a fundamental tool of computational algebra and it has found 
countless applications in coding theory, cryptography and even directions of Physics, 
Biology and other sciences. 

Although Buc hberger presented several improvements to his algorithm for computing 
Grobner bases in Buchberger (|l979l ). the efficiency is not so good. Recent years have seen 
a surge in th e number of alg orithms in computer algebra research, but efficient ones are 
few. Faugere iFaugerd (|2002h proposed the idea of signatures and utilized two powerful 
criteria to avoid useless computation in the F5 algorithm. Faugere and Joux broke the 
first Hidden Field Equation (HFE) C ryptosystem Challenge (80 bits) by using t he F5 
algorithm in Faugere and Jouxj d2003f) . The p roof of the term ination in Faugere ( 2002 ) 
was labeled as a conjecture in ISteger 1 (120051) . However, Gash|GashJ {2009) pointed out 
that there exists an error in the proof of the termination of the F5 algorithm, and he 
proposed anot her conjecture f o r it. I t will be shown in this paper that the conjecture is 
still wrong. In lArri and Perrvl ([20111 ). a simpler algorithm was constructed to prove the 
termination, but the proof unfortunately has flaws due to the abuse of the monomial 
order and the module order mentioned in this paper. Though the F5 algorithm seems 
to termina te for any polynomial i deals, the proof o f it h a s been adm i tted as an open 
problem in ISun and Wang] (j2011bl) , lEder and PerTvl (|201lh , lEder et all (|201ll ) . Recently, 
signature-based algorit hms like the GVW algorithm and its variant the GVWHS algo- 
rithm are proposed in iGao et all (l2010l) . IVolnv IVl (1201 ll) . The algorithms are claimed 
to terminate if the monomial order and the module order are "compatible" , but readers 
can hardly find a direct proof. The relation between the reducible and rewritable check, 
which was not considered before, is studied in the paper, and the finiteness of the top- 
reduced S-Grobner basis for a polynomial ideal is proved if the "compatible" property is 
satisfied. Then we give a complete proof of the termination of the GVWHS algorithm. 
Besides, through reformulation, the GVWHS algorithm can be seen as an F5-like algo- 
rithm (with a different insertion strategy). Though the F5B algorithm (F5 algorithm in 
Buchberger's style) may generate redundant sig-polynomials, by analyzing the similarity 
with the GVWHS algorithm, we prove the termination of the F5B algorithm. Moreover, 
the termination of the F5GEN algorithm (F5 algorithm with a generalized insertion strat- 
egy) is also proved later on. Moreover, by employing an appropriate insertion strategy 
for the F5GEN algorithm , the proof of the correctness and termination of the original 
F5 algorithm is self-evident. 

The paper is organized as follows. We start by settling basic notations in Section 2. In 
Section 3, we present a new definition of the admissible module order. Then two admissi- 
ble orders and their connection are described in Section 4 and the top-reduced S-Grobner 
basis for a polynomial ideal is proved to be finite. Based on this finiteness, we propose a 
new proof of the termination of the GVWHS algorithm in Section 5 and point out that 
the GVWHS algorithm is a variant of F5 algorithm by introducing the intermediate F5G 
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algorithm (F 5 algorithm in GVWHS 's style). In Section 6, a simpler version of the F5B 
algorithm in ISun and Wand (1201 lah is presented and proved. Considering the different 



insertion strategy between the F5 algorithm and the F5B algorithm in this paper, we 
prove the correctness and termination of the F5GEN algorithm in Section 7. 

2. Preliminaries 

Let r be a (binary) relation on a set M, one may associate the strict part r s = r\r~ x , 
and let N C M. Then an element a of N is called r- minimal in N if there is no b G N 
with br s a. A strictly descending r-chain in M is an infinite sequence {a„} n6 N of 
elements of M such that a n+ ± r s a n for all n G N. If there is another relation t satisfying 
r C t, then t is called an extension of r. The relation r is called well-founded if 
every non-empty subset N of M has an r-minimal element, r is a well-order on M if 
r is a well-founded linear order on M. For more concepts not presented here, refer to 



Becker et all ( 1993) 



Let R = k[x\, . . . ,x n ] be the polynomial ring over the field k with n variables. We 
define an admissible order on the monoid M. — {Ilf^x^ | <Zj G N}. 

Definition 1. An admissible monomial order < m is a linear order on M that satisfies 
the following conditions. 

(1) 1 <m m for all m G M. 

(2) mi < m m,2 implies mi • s < m ■ s for all s, mi, ni2 G M.. 

It can be seen that the admissible order < m is a well-order on M.. Sometimes we write 
= for = m for brevity. For any p G R, without confusion, we denote the leading monomial 
of p by lm(p), the leading coefficient by lc(p), and the leading term by lt(p) — lc(p)lm(jp) 
with respect to the order < m . 

Let I be the ideal generated by the set F = {/i, . . . , fd} G R, that is, 

I =< fi, ...,fd>= {pifi + ■ ■ -+Pdfd\pi, ■■■,Pd G -R}- 

Consider the following _R-submodule of R d x R: 

SP = {(u,p) G R d x R | u • f = p}, 

where f = (fi,---,fd) £ R d , and e^ is i-th unit vector of R d such that the free R- 
module R d is generated by the set S = {ei, . . . ,ed}- The element sp in SV we call a 
sig-polynomial. A subset Syz = {(u, 0) G SV} is defined the syzygy submodule 
for SV, and NSP = SV \ Syz is called the set of non-syzygy sig-polynomials. Let 
(ux,pi) and (u2,f>2) be two non-syzygy sig-polynomials in SV. A syzygy (j>2Ui — P1U2, 0) 
is called a principal syzygy. 



3. The admissible module order 

Below is a fundamental tool for a clearer understanding of termination of algorithms 
for computing Grobner bases, 

Definition 2. Let ^ be a quasi-order on M and let N C M. Then a subset B of N is 
called a Dickson basis, or simply basis of N w.r.t. ^< if for every a G N there exists 
some b G B with b < a. We say that < has the Dickson property, or is a Dickson 
quasi-order, if every subset N of M has a finite basis w.r.t. -<, 
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If < is a (Dickson) quasi-order on M, then we call (M, ^) a (Dickson) quasi-ordered 
set. Let now (M, :<) and (N, ^) be quasi-ordered sets, then a quasi-order <' on Cartesian 
product M x N is defined as follows: 

(a, b) (c,d) <^> a ^ b and c < d, 

for all (a, 6), (c, d) G M x N. The direct product of the quasi-order sets (M, -<) and 
(N, ^) is denoted by (M x N, -<'). The Dickson property can be derived as follows. 

Lemma 3. \Becker et all ll99& ) Let (M, <) and (N, <) be Dickson quasi-ordered sets, 
and let (M x N, <') be their direct product. Then (M x N, <') is a Dickson quasi-ordered 
set. 

The immediate corollary is that (N", <'), the direct product of n copies of the natural 
numbers (N, <) with their natural ordering is a Dickson partially ordered set. This is 
Dickson's lemma, and another version of which is given below by an isomorphism. 

Lemma 4 (Dickson's lemma). \Becker et al\ Xl99& ) The divisibility relation \ on Ai is 
a Dickson partial order on Ai. More explicitly, every non-empty subset S of Ai has a 
finite subset B such that for all s S S, there exists t £ B with t\s. 

Let Aid — {mei \ m € M., i S {1, . . . , d}} be the 7W-monomodule of R d . The definition 
of the divisibility relation |' on Aid is 

mie^ |' m2Gj O m\ 1 77^2 and i = j G {1, . . . , d}. 

By an abuse of notation, we still denote | instead of |'. Since (Ai, ) is a Dickson partial 
ordered set, by decomposing Aid into UAiei, (Aid, |) is also a Dickson partial ordered 
set. On Aid, we will define the admissible order similarly. 

Definition 5. An admissible module order < s is a linear order on Aid that satisfies 
the following conditions. 

(1) e^ < s mei for all me^ S Aid, 

(2) m\e.{ < s m,2e.i implies m\ ■ se^ < s ni2 ■ se^ for all s G Ai, m\ei, m^e^ £ Aid- 

For convenience, = s is replaced by =. In fact, the admissible order < s implies the 
following properties. 

Proposition 6. The admissible module order < s is a well-order on Aid, and it extends 
the order \ on Aid, i-e., m\e,i \ TT^e^ implies m\Gi < s rri2ei, for all miei,m,2ei 6 Aid,i € 
{l,...,d}. 

Proof. If rri\e.i \ m2ei in Aid, then there exists t £ Ai with t ■ m\ei = s Tr^e^. Since 
ei < s m^ei, this implies 

mie., = 1 • ui\e.i < s t ■ mie^ = 77i2e.;. 

This shows that < s extends | on Aid- By Dickson's lemma, < s is a Dickson partial order 
on Aid- And < s is a well-order on Ai as it is a linear order. □ 

It sho uld be noticed that < s may or may not be related to < m . The compatible 



property iKreuzerl (|2000l ) between < m and < s is used for the proof of termination for 
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the GVWHS a l gorith m in IVolnv IVI (|201ll) : aej < s rej if and only if a < m r. And in 
Arri and Perrvl (|201ll) . this property is implicitly used in the proof of termination. The 
following section will show that this relation is indispensable for the proof of finiteness. 

For any sp — (u,p) G SV, let Zto< s (u) = /ie^ be the signature of (u,p) and lm< m {p) 
the leading monomial of (u,p). By an abuse of notation, we write Im for Zm< s and lm< m 
if no misunderstanding occurs. We call k = idx(u) — idx(sp) the index and call [i the 
monomial of the signature. The set of the signatures of elements in SV* — SV \ {(0, 0)} 
is denoted by sig{SV*). 



4. Properties of sig-polynomials 
Definition 7. Define a map 

LM :NSP^ M d x M 

(u,p)-)-(s,m) = (lm(u),lm(p)), 

and three orders -< m ,s, -< s ,m and | super on the image LM (NSP) in the following way: 



(s', to') -<m t s (s, m) ■ m' = m and A • s' < s s, 
(s", to") ^ SyTn (s, to)<^> A • s" = s and A • to" < m to, 
(s*, TO*)| super (s, to) <J=>A • to* = to and A • s* = s, 



where sp, sp' , sp" G NSP, A G A4, and by the relation < s (< m ) is meant the strict part 
of the associated admissible module order. 

Under the map LM, the image of a sig-polynomial is called a leading pair. We can 
generalize two orders ^ SiTn and \ super on LM(SV*) by adding the following definitions. 



(s',0)^ s , m (s,m)-» s'|s, 
(s*,0)| super (s",0)^s* |s", 

where the sig-polynomials above are all in iSP* and to ^ 0. 

Without confusion, denote | on LAI(SV*) instead of \ sup er too. Now, a special kind 
of reduction is introduced as follows. 

Definition 8 (Top- Reduction) . Let (u,p) G SV* be a sig-polynomial and B C SV* a set 
of sig-polynomials. sp is called to be top-reducible by B, if there exists a sig-polynomial 
(u',p') G B satisfying one of the three conditions below, 

(1) LM{u',p') < m . s LM(xi,p), for lm(p) ^ 0, 

(2) LM{u',p') < s , m LM(u,p), for lm(p) ? 0, 

(3) LM(u',p')\LM(u,p); 

otherwise, (u,p) is top-irreducible by B. Such a top-reduction is called regular, if 
item 1 or 2 is satisfied, and super otherwise. 
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For convenience, we call a regular top-reduction satisfying item 1 by a tm-reduction 
(top monomial reduction) for short, and call a regular top- reduction satisfying item 2 by a 
ts-rewritin eTn (top signature rewriting). Let sp\ G SV be a non-syzygy sig-polynomial. 
We say that sp\ is tm- reducible by SV* if there exists sp2 G SV* such that sp\ — y sp2, 

i.e., sp2 is the tm-reduction result of sp± by some sig-polynomial in SV* . — — ■> is the 

reflexive-transitive closure of — >. Let SQ be a subset of SV. SQ is called an S-Grobner 

sv 

basis for the module SV, if every nonzero sig-polynomial sp G SV is to p-reducible by SQ . 
This definition is the same as the one in Gao et all (|2010l ). Hence, by iGao et al. (2010, 



Prop. 2.2), define the Grobner basis for the syzygy module of f by Qo = {u | (u,p) G 
SG,p = 0}, and define the Grobner basis for 1 by Q\ = {p \ (u,p) G SQ,p ^ 0}. 

Certainly, there exist different S-Grobner bases for a polynomial ideal. Before investi- 
gating S-Grobner bases, let us consider the properties of the order -< mjS (^s,m)- 

Proposition 9. (1) The order -K m , s (~<s,m) is strictly well-founded partial-order on 
LM(NSP) (LM{SV*)). 
(2) Let S p be the set of -< m ^-minimal elements in LM(NSP) and S q the set of ^ s .m- 
minimal elements in LM(SV*), then S q — S p © S syz , where S syz — {(s,m) G 
S q \m = 0}. 



Proof. 

(1) It is easy to see that -< m>s and -< Sim are irreflexive, strictly antisymmetric and 
transitive. Assume for a contradiction that the sequence {(s„, ra„)}„ 6 [j is a strictly 
descending -<„ ljS -chain in LM(NSP), then mi — mjy when i > TV for some N G N 
since | is well-founded on M.. For any i > j > N, we must have s^ < s Sj < s 
s^r. Thus, {s n } ra >j\r form a strictly descending < s -chain in sig{SV*), whereas the 
admissible module order < s is a well-order, a contradiction. Similarly, -< s ^ n is 
strictly well-founded because | is well-founded on Aid and the admissible module 
order < m is a well-order even if is added. 

(2) For (si, mi) G S p , assume that there exists a leading pair (s2, m,2) in LM(SV*) such 
that (s2,77i2) -< s ,m (si,mi). Then there exists a nonzero monomial m G M. such 
that ms2 = Si and mm^ < m m-i- Let S3 = lm(si — ms2) and 1113 = lm(wi\ — mm-i), 
then m3 = mi and S3 < s Si. Thus, there is a leading pair (33,7713) G LM(SP*) 
such that (s3,m,3) ^; m , s (si,mi), a contradiction. For (si,mi) G S g \ S syz , it can 
be proved similarly that (si, mi) is also in S p . 

□ 



Below follows a natural corollary. 

Corollary 10. Let sp be a non-syzygy sig-polynomial in SV* . sp is ts-rewritable by SV* 
if and only if it is tm-reducible by SV* . 

It can be seen that ISP = {sp G SV* \ LM(sp) G S q } is the set of all sig-polynomials 
which are not ts-rewritable by SV* . Super top-reducing elements further in ISP results 
the subset of all top-irreducible sig-polynomials called the top-reduced S-Grobner 

1 The term "ts-rewriting" has the similar meaning as the "M- pair" in lVolnv iVI feOlll l. 
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basis TSQ for SV . The signature of a top-irreducible sig-polynomial is defined by the 
top-irreducible signature for SV. Besides, by two equivalent sig-polynomials sp 

and sp' wc mean sp' ^ sp such that LM(sp') = LM(sp). If we store only one for 
equivalent sig-polynomials in TSQ, for fixed orders < m and < s , the top-reduced S- 
Grobner basis TSQ is uniquely determined by the module SV up to equivalence. Those 
top-reducible sig-polynomials in SV\TSQ are also called redundant sig-polynomials. 

Since (Ai, |) and (Aid, |) are Dickson partial ordered sets, by Lemma 3, we have 
(Aid x Ai, |*) is also a Dickson partial ordered set of which the order |* is defined as 
follows: 

(si,TOi) |* (s 2 , m 2 ) Si | s 2 and mi | m 2 , 
where (si,toi), (s 2 ,to 2 ) arc in Aid x Ai. 

Lemma 11. Let (si,mi) and (s 2 ,m 2 ) be two arbitrary leading pairs in LM(SV*) such 
that (si,mi) |* (s 2 ,m 2 ). If the admissible monomial order < m and the admissible module 
order < s are compatible, then (si,mi) and (s 2 ,m 2 ) are comparable with respect to one 
of the three orders < m ,s; d:s,m and \ . 

Proof. Let s and m be two monomials in Ai such that s = s 2 /si and m = m2/ml. 
There are three cases as follows. 

(1) If m = s, then (si, mi) | (s 2 , m 2 ). 

(2) If s < m m, then sm\ < m m 2 , and (si,mi) < s . m (s 2 ,m 2 ). 

(3) If m < m s, as < m and < s are compatible, msi < s ssi = s 2 , and (si,mi) ~< m . s 
(s 2 ,m 2 ). 

Therefore, (si,mi) and (s 2 ,m 2 ) are comparable with respect to one of the three orders 

dlm.s, dls.m an d |. □ 



The finiteness of the top-reduced S-Grobner basis is due to the following fact. 

Theorem 12. The divisibility relation \ is a Dickson partial order on LM(SV*). More- 
over, the top-reduced S-Grdbner basis for SV is finite. 



Proof. It is straightforward to verify that | is reflexive, transitive and antisymmetric. 
Since |* is a Dickson partial order on LM(SV*), the |*-minimal elements in LM(SV*) 
are finite. Because the leading pair of a top-irreducible sig-polynomial is |*-minimal in 
LM(SV*) by Lemma 11. So there are a finite number of top-irreducible sig-polynomials 
in TSQ up to equivalence. □ 



It can be seen that the "compatible" property is indispensable for the finiteness of the 
top-reduced S-Grobner basis TSQ. Hence in the remaining sections of this paper, we will 
assume that the admissible monomial order < m and the admissible module order < s are 
compatible. Suppose two sig-polynomials sp\ = (ui,pi), sp 2 = (u 2 ,p 2 ) G NSP. Let 

m = lcm(lm(p 1 ),lm(p 2 )), m x = - — - — - m 2 = - — -. — r. 

Zm(pi) lm(p 2 ) 

If miZm(ui) > s m 2 lm(u 2 ), then 

• cp = mi(ui,pi) = (miui,raipi) is called a J-pair of spi and sp 2 ; 

• spi (sp 2 ) is called the first (second) component of cp; 

• mi and m 2 are called the multipliers of spi and sp 2 . 
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5. The GVWHS Algorithm 

As in IVolnv IVl <|201lh . it can be deduced ei, . . . , e<j are top- irreducible signatures. Let 



sp = (ei, g) be a sig-polynomial in NSP, where 1 < i < d. If LM(sp) is not -< Sim -minimal 
in LM(SV*), there must exist a sig-polynomial sp' — (ei,g') e SV* whose leading pair 
is ^s,m-minimal. As sp' cannot be super top-reduced by SV* , sp' is top-irreducible sig- 
polynomial and is top-irreducible signature. 

For a signature s, we denote by 5"P< s ( s ) the subset of sig-polynomials in SV of which 
the signatures are smaller than or equal to s with respect to the order < s , and denote by 
t S^< s ( s ) the S-Grd bner basis for SV <j s ). We have the following theorem which is similar 



but stronger than lVolnv IVl (|2011l Th. 4.11). 



Theorem 13. Let s be a signature in sig(SV*) such that s ^ e, for any 1 < i < d. s 
is top-irreducible if and only if s is the signature of a J-pair cp of two non-syzygy top- 
irreducible sig-polynomials with smaller signatures and cp is not ts-rewritable by SQ <s ( s y 



Proof. As < q is well-founded, and ei,...,ed are top-irreducible, there exists a top- 
irreducible sig-polynomial (uk,gk) such that mk(uk, gk) has signature s and m k (u k , gk) 
is not ts-rewritable by SG< S ( S ), where m k > rn 1. Because s is a top-irreducible signa- 
ture, LM(mkUk,mkgk) is not ^m-minimal in LM(SV*). Hence there is a non-syzygy 
top-irreducible sig-polynomial (uj,gj) G SS<Js) tm-reducing nik(uk, gk). Denote by 
m' k (u k ,g k ) the J-pair of (u k ,g k ) and (uj,gj), where m' k \ m k . 

Assume for a contradiction that m' k properly divides m k . Because m' k (u k , g k ) is not 
ts-rewritable by SG< B ( S ), after a sequence of tm-reduction on m' k (uk, gk), we get a tm- 
irreducible sig-polynomial (uj,#i) and gi ^ 0. (iij,^) is equivalent to m t (u t , g t ), a mono- 
mial multiple of some top-irreducible sig-polynomial (u t} gt) £ 5<?< s ( s ), where m t > m 1- 
Thus, (u t ,gt) ts-rewrites m' k (u k , g k ) and thence mk(vL k , g k ), a contradiction. Therefore, 
m' k = mk, that is, cp — (mkUk,m,kgk) is the J-pair of two non-syzygy top-irreducible 
sig-polynomials with smaller signatures such that s = lm(mkUk) — Zm(u') and cp is not 
ts-rewritable by iS(5< s ( s )- 

For the forward direction, assume for a contradiction that s is not top-irreducible. 
Then LM(u,g) is -< SjTO -minimal in LM(SV*). By Proposition 9, LM(u,g) is also -< m ,s- 
minimal in LM(SV*) as g ^ 0, a contradiction. □ 



First, we present the GVW HS algorithm, which is modified slightly from the algorithm 
mentioned in lVolnv IVl (|201ir) . The subset of non-syzygy sig-polynomials in SQ is denoted 
by Gi and sig(Gi) is the set of signatures of sig-polynomials in Gi. Let S be a set of 
polynomials (sig-polynomials), sort(S, < m (< s )) means that we arrange S by ascending 
leading monomials (signatures) of polynomials (sig-polynomials) with respect to the order 

<m (<«)• 

The only difference compared with the basic algorithm in IVolnv IVl ( 2011 ) is that we 
discard the Grobner basis for th e syzygy module when the algorithm terminates. Note 
that the proof for correctness in IVolnv IVl ( 2011 ') is not complete. Suppose s is a top- 
irreducible signature, it must be proved, as in Theorem 13, that there exists a J-pair of 
cp such that cp is an M-pair and s cp = s. 



Theorem 14. For any finite subset F of polynomials in R, the GVWHS algorithm 
terminates after finitely many steps and it creates a Grobner basis for the ideall =< F >. 
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Algorithm 1 The GVWHS algorithm 



l: inputs: 

F = {/i, . . . , fd} E R, a list of polynomials 
< m an admissible monomial order on Ai 

< s , an admissible module order on Aid which is compatible with < m 

2: Outputs: 

Qi, a Grobner basis for X =< /i, . . . , /d > 
3: interreduce F and F :=sort({/i, . . . , /d}, < m ) 
4: initl: 

CPs := {(ei,/i), . . . , (e d , f d )} and 50 = {{he, - /,e t , 0) 1 1 < i < j < d} 
5: while CPs ^ do 

6: cp :=min({cp e CPs}, < s ) and CPs := CPs\{cp} 
7: if cp is not ts-rewritable by SQ then 
8: cp sp = (u, 5 ) 

9: if 5 ^ then 

10: CPs :=sort(CPsU { J — pair(sp,sp') \ Msp' G Gi}, < s ) and store only one 

J-pair for each distinct signature of minimal leading monomial 
11: Sg-SguHgui-gm^Kuug^GGi} 

12: sg -.= sg u sp 

13: return {g \ (u, g) eSg\ Syz} 



Proof. We proceed by induction on the top-irreducible signature s. Because < s is an 
admissible module order on Aid, the smallest signature of sig-polynomials in SV* must be 
one of the top-irreducible signatures ei, . . . , e^, denoted by e,. The case s = e.; is trivial. 
As Cps is initialized with {(ei, /i), . . . , (e<j, /<j)}, during the first while-loop, (e i} fi) is 
added into Sg, which is the S- Grobner basis Sg <a ( e .y 

Let s > ei, and suppose that Sg created by the GVWHS algorithm is 5{?< s ( s ) after 
finitely many while-loops. If s = e^, where 1 < j < d, j ^ i, there exists a cp — (ej,fj) 
at line 6 and cp is not ts-rewritable by <S<5< 3 ( ej )- Tm-reducing cp repeatedly by Sg <s ( e .j 
at line 8 results a top-irreducible sig-polynomial sp with signature e^ because e^ is top- 
irreducible. Thus, Sg< s ( ej ) can be obtained. If s ^ e^, we can also obtain a J-pair cp' with 
signature s at line 6 and cp' is not ts-rewritable by 5{?< s ( s ) by Theorem 13. After that, a 
top-irreducible sig-polynomial sp with signature s is created and Sg = Sg <s ( s y Because 
top-irreducible signatures are finite in SV, after finitely many steps, Sg = 50< 3 ( Smaa .) is 
the S-Grobner basis. 

By Theorem 13, the remaining J-pairs in CPs, if any, are all sig-polynomials with 
top-irreducible signatures and they will be ts-rcwritten by Sg. Therefore, the algorithm 
terminates and generates Sg, an S-Grobner basis for SV, and the output is a Grobner 
basis for the ideal I ~< F >. □ 



In the remaining part of this section, we aim to reformulate the GVWHS algorithm 
into an F5G algorithm (F5-like algorithm in GVWHS's style) and find out the connection 
between the GVWHS algorithm and the F5 algorithm. It is, we shall see, an F5-like 
algorithm with a different insertion stategy. Before proceeding to prove the termination 
of the F5G algorithm, we introduce another order as follows. 
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Definition 15. Define an order on LM(SV*) in the following way: 

(fie^m) (//ej,m') rap! < m ra'p 

Note that the order <i is not defined when two elements in LM (SV*) are with different 
signatures, so <i is a well-founded quasi-order on LM(SV*). Particularly, if we restrict 

on the subset {(yue,, m) G LM(SV*) | i = io, 1 < «o < cO}, then is a well-order on 
it. Moreover, if (pei,ra) -< Sim (/i'ej,m') or (p'ei,m') < m ,s (^6^,771), we have (pei,m) -<j 
(^'ei,m'). 

Below is the pse udo code of the F5G al gorithm in Buchberger's style which is similar 
to the algorithm in lSun and Wand (<2011al) . We detach the set Psyz of principal syzygies 



from SQ, and the remainder is denoted by SQ' . That is to say, SQ = PSyz U SQ' . As 
is known that there may exist syzygies in SQ' , so by Gi is meant the set of non-syzygy 
sig-polynomials in SQ' . The notations are similar with those in the GVWHS algorithm. 

Algorithm 2 The F5G Algorithm (F5-like algorithm in GVWHS's style) 
1: inputs: 

F = { fi, . . . , fd} G R, a list of polynomials 
< m an admissible monomial order on Ai 

< s , an admissible module order on Aid which is compatible with < m 
r<;, an order on LM(SV*) 

2: Outputs: 

Qi, a Grobner basis for 1 =< fi,...,fd > 
3: interreduce F and F :=sort({/i, . . . , f d }, < m ), Fi = (e<,/i) for i = 1, . . . , d 
4: init2: 

CPs :=sort({ J - pair[F z , Fj] \ 1 < i < j < d}, <„), SQ' = {Fi | i = 1, . . . , d} and 
PSyz = {(f iej - fjei, 0) 1 1 < % < j < d} 
5: while CPs ^ do 

6: cp :=min({cp G CPs}, < s ) and CPs := CPs\{cp} 

7: if cp is neither ts-rewritable by PSyz nor F5-rewritable by SQ' then 

8: cp -£-> sp = (u, g) 

SQ 

9: SQ' :=insert_by_decreasing_l(sp, SQ' , <i) 

10: if g 7^ Q then 

11: CPs :=sort(CPs U { J - pair(sp, sp') \ Msp' G Gi, sp' ^ sp}, < s ) = 

{mSG' (k)} and store only one J-pair for each distinct signature of which the first 
component has maximum index k in SQ' 

12: PSyz := PSyz U {(gui — g;u,0) | (u;,^) G Gi} and discard those super 

top-reducible in PSyz 

13: return {g \ (u, g) G SQ' \ Syz} 



It is important to note that the index k mentioned at line 11, different from the index 
of a sig-polynomial, points to the sig-polynomial of the A:-th position in iSC?'- 

Let spj, spi be two sig-polynomials in SQ' and let cp = tspi, cp' — t'spj be two J- 
pairs with the same signature. From the insert_by_decreasingj function, we know that 
spj appears later in SQ' than spi if LM(spj) -<i LM(spi). In this case, cp' is discarded 
as its first component spj is ahead of the first component spi of cp. Hence line 11 of 
the F5G algorithm is equivalent to storing only one J-pair for each distinct signature of 
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Algorithm 3 F5-rcwritable 
l: inputs: 

cp = m(u k ,g k ) G SV 
SQ' :=Sg'(i) = {(ui, 5 i),...,(u r , 5r )} 
2: outputs: 

true if mufc is F5-rewritable by another sig-polynomial in SQ' 
3: find the first index jb and the last index j e in SQ' such that idx(sp) = idx(SQ'(jb)) — 

idx(sg'(j e )) 

4: for i = j e to j b do 

5: if im(uj) I Zm(mufc) then 

6: return i ^ 

7: return false 



Algorithm 4 insert_by_decreasingj 
l: inputs: 

sp, a sig-polynomial 
SQ' :=SQ'(i) = {(ui,5i),...,(u r ,g r )} 
^j, an order on LM(SV*) 
2: find the first index and the last index j e in <S£' such that idx(sp) 

idx{sg'(j e )) 

3: for i = j e to do 

4: if LM (50'(*)) ^ ; LM(sp) then 
5: insert sp into SQ' after SQ' (i) 

6: return 

7: insert into before SQ' {jb) 
8: return 



minimal leading monomial at line 10 of the GVWHS algorithm. Even more, the F5G 
algorithm adopts the same criterion as the GVWHS algorithm for finding redundant 
sig-polynomials. 

Lemma 16. During an execution of the while-loop, let cpo be the J-pair chosen at line 6 
in the F5G algorithm, and let CPs be the value of CPs, PSyz the value of PSyz, and 
SQ'q the value of SQ' at line 6. The criteria of line 7 in the F5G algorithm are equivalent 
to the statement of judging whether cpo is not ts-rewritable by PSyz \JSQ' . 

Proof. Assume that the J-pair cpo — m(\ik,gk) — rnspk is ts-rewritable by SQ' in 
the F5G algorithm. We may find spi — (\ii,gi) G SQ' ts-rewrite cpo and Zm(mjUj) = 
Im(mUk), where mi > m 1. Since LM(spi) -<i LM(spk) means i > k, cpo is F5-rewritable 
by spi in the F5G algorithm. That is to say, cpo can not pass the criteria of line 7 in the 
F5G algorithm. 

If cpo — mspk G CPso is not ts-rewritable by SQ . Assume for a contradiction that 
cpo is F5-rewritable by spj G SQ' Q , j > k. We know LM(spj) LM(spk), or else the 
J-pair cpo had been discarded by linell of the F5G algorithm. So LM(spj) ~<i LM(spk), 
which means lm(mjUj) = lm(mvLk) and lm(mjgj) < lm(mgk), where rrij > m 1. Hence 
cpo is ts-rewritable by spj, a contradiction. □ 



= idx(SQ'( Jb )) = 
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Note that Lemma 16 does not apply to the algorithms we will discuss later since the 
insertion strategy of the F5G is used for the proof. In Theorem 13, two components of a 
J-pair have to be top-irreducible. As a matter of fact, a generalized lemma follows. 

Lemma 17. If s is the signature of a J-pair cp — mspk = m(\ik,gk) °f t wo non- 
syzygy sig-polynomials spk and spj (with smaller signatures) and cp is not ts-rewritable 
by SQ <g ( s y then s is a top-irreducible signature of SV . 

Proof. Assume for a contradiction that lm(muk) is not a top- irreducible signature. 
Then LM(cp) is -< s , m -minimal in LM{SV*). But there exists m'spj — m(\ij,gj) such 
that lm(m'uj) < s (m(mut) and lm(m'gj) = lm{mgk), that is, cp is tm-reducible by 
SQ< 3 ( S ), a contradiction. □ 

Theorem 18. For any finite subset F of polynomials in R, the F5G algorithm terminates 
after finitely many steps and it creates a Grobner basis for the ideal X =< F >. 

Proof. Due to Lemma 16, we will use the criterion of judging whether cp is not ts- 
rewritable by PSyz U SQ' instead. Similar to the corresponding proof of the GVWHS 
algorithm, we proceed by induction on the top-irreducible signature s. Because < s is an 
admissible module order on Aid, the smallest signature of sig-polynomials in SV* must 
be one of the top-irreducible signatures ei, . . . ,e<i, denoted by e^. The case s = e, is 
trivial. As SQ' is initialized with {(ei, /i), . . . , (e<j, fd)}, SQ' is the S-Grobner basis for 

Let s > ej, and suppose that PSyzUS^' created by the F5G algorithm is PSyz^^U 
^< s (e ) = ££< 3 (s) after finitely many while- loops. If s = ej, where 1 < j < d, j ^ i, 
there is only one sig-polynomial (ej,/j) in SQ' <e ^ with top- irreducible signature ej. 
And if (ej,/j) is tm-irrcducible by SQ <s{e .y PSyz <s(ej) USQ' <s(ej) is SQ< s{e .y If (ej, fj) 
is tm-reducible by SQ <s ( ej y during an execution of the while-loop, line 6 will create a J- 
pair cp = (ej, /j) and cp is not ts-rewritable by SQ <g ( e y Tm-reducing cp repeatedly by 
SQ < a (e) at line 8 results a top-irreducible sig-polynomial sp with signature ej because ej 
is top-irreducible. Thus, SQ< B ( ej -) can be obtained. If s ^ ej, we can also obtain a J-pair 
cp' with signature s at line 6 and cp' is not ts-rewritable by <S5< 3 ( S ) by Theorem 13. After 
that, a top-irreducible sig-polynomial sp with signature s will be created. Because top- 
irreducible signatures are finite in SV, after finitely many steps, PSyzUiSC?' = 55< 3 ( Smax ) 
is the S-Grbbner basis. 

By Lemma 17, the remaining J-pairs in CPs, if any, are all ts-rewritable by SQ. 
Therefore, the algorithm terminates and generates an S-Grobncr basis PSyz U SQ' for 
SV, and the output is a Grobner basis for the ideal X =< F >. □ 

6. The termination and correctness of the F5B Algorithm 

We present two variants of the F5 algorithm here and in the next section, both of 
which share the same F5-rewritten criterion with that in the F5G algorithm. So we do 
not write the F5-rewritable function in detail again. 

For two non-syzygy components spi and sp2 of a J-pair, let mi and mi, respectively, 
be their multipliers. A much simpler version than the F5B algorithm (F5 algorithm 
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in Buchberger's style) in Sun and Wand ( 2011a ) is given below. The F5B algorithm 
here does not apply F5-rewritable check for rriispi nor in the tm-reduction of the J- 
pair. Omitti ng these influences nei ther the termination nor the correctness of the F5B 
algo rithm in Sun and Wanel ( 2011a ). For details, one can refer to Sun and Wang ( 2011bl ) 
and Eder and Perrvl (|201l[ ). 



Algorithm 5 The F5B Algorithm (F5 algorithm in Buchberger's style) 
1: inputs: 

F = {/i, . . . , fd} G R, a list of polynomials 
< m an admissible monomial order on M. 

< s , an admissible module order on Md which is compatible with < m 
-<l, an order on LAI {ST*) 

2: Outputs: 

Qi, a Grobner basis for 1 =< fx, ■ ■ . , fd > 
3: interreduce F and F :=sort({/i, . . . , f d }, < m ), F = (e it fi) for i = 1, . . . , d 
4: init2: 

CPs :=sort({ J - pair[F u Fj] | 1 < i < j < d}, < s ), SQ' = {Fi \ i = 1, . . . , d) and 
PSyz = {(/ iej - f jei , 0) 1 1 < i < j < d} 
5: while CPs ^ do 

6: cp :=min({cp G CPs}, < s ) and CPs := CPs\{cp} 

7: if cp is neither ts-rewritable by PSyz nor F5-rewritable by SQ' then 

8: cp -£-> sp = (u, g) 

SQ 

9: SQ' :=insert_by_index(sp, SQ') 

10: if g ^ then 

11: CPs :=sort(CPs U { J - pair(sp, sp') \\/sp' G Gi, sp' ^ sp}, < s ) = 

{mSG'(k)} and store only one J-pair for each distinct signature of which the first 
component has maximum index k in SQ' 

12: PSyz := PSyz U {(gui — .g;u,0) | (u;,^) G Gi} and discard those super 

top-reducible in PSyz 

13: return {g | (u, g) G SQ' \ Syz} 



Algorithm 6 insert_by_index 



1: inputs: 

sp, a sig-polynomial 

SQ' := SQ'{i) = {(ui,gi),...,(u r ,g r )} 
2: find the last index j e in SQ' such that idx(sp) = idx(SQ' \j e )) 
3: insert sp into SQ' after SQ'(j e ) 
4: return 



Instead of using an auxiliary number for each sig-polynomial in lSun and Wang] ( 2011a ) , 



the F5B algorithm here realizes the same rewritable check by adjusting the order of sig- 
polynomials in SQ'. One can find that the real difference between the F5B and F5G 
algorithms is the insertion of elements in SQ' . The reason why line 11 does not affect 
the correctness of the algorithm lies in the fact that the first component of the discarded 
J-pair appears earlier in SQ' than that of the stored J-pair. 
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Lemma 19. Let s be a signature in sig{SV*) such that s ^ for any 1 < i < d. During 
an execution of the while-loop in the F5B algorithm, let PSyz <g ^ and SQ <a ^ be the 
values of PSyz and SQ' . If s is top-irreducible, then s is the signature of a J-pair cp 
of two non-syzygy sig-polynomials in 5£' <s ( s ) with smaller signatures and cp is neither 
ts-rewritable by PSyz^^ nor F5-rewritable by SQ' <s ^ s y 

Proof. By Theorem 13, there exists a J-pair cp' = m'(uk,gk) of two non-syzygy top- 
irreducible sig-polynomials with smaller signatures such that s = lm(m'uk) and cp' is 
not ts-rewritable by SQ <s ( s y If cp' is not F5-rewritable by SQ' <g ^ s y cp' is the desired 
cp. If cp' is F5-rewritable by SG' <a ( s ), let (uj,gj) be the non-syzygy sig-polynomial in 
5£>< s ( s ) F5-rewriting cp' as s is top-irreducible signature. That is, (uj,gj) satisfies that 
lm(mUj) = s and m(uj,gj) is ts-rewritable by SQ <g ( s y Further more, (uj, gf) is the sig- 
polynomial in 55< 3 ( s ) with the largest signature dividing s according to the structure of 
the F5B algorithm. As s is top- irreducible signature, m(uj,gj) is not ts-rewritable by the 
principal syzygy submodule PSyz <s ( s ) and it can be tm-reduced by some non-syzygy 
top-irreducible sig-polynomial (u t ,gt) in SQ' <s ( s y Denote by m*(uj,gj) the J-pair of 
{uj,gj) and (u t ,g t ), where m* | m. 

Assume for a contradiction that to* properly divides m. It can be deduced that 
m*(uj,gj) is neither ts-rewritable by PSyz^^ nor F5-rewritable by SQ' <B ^ s y After a 
sequence of tm- reduction on m*(\ij, gj), we get a tm- irreducible sig-polynomial (u v ,g v ) 
added later in SQ' <s ^ than (uj,gj). Because u„ | m*Uj | s and lm(uj) < s lm(u v ), which 
contradict the fact that (\ij,gj) F5-rewrites cp' . Therefore, m* = to, that is, cp = 
(m\ij,mgj) is the J-pair of two non-syzygy sig-polynomials with smaller signatures 
such that s = lm(mUj) = Zto(u') and cp is neither ts-rewritable by PSyz <a( - s - ) nor 
F5-rewritable by Sg' <s(s) . □ 

It is important to note, however, that we can not guarantee the reverse direction of 
Lemma 19 is satisfied too. That is to say, there may exist a J-pair cp such that it passes 
the criteria and the signature of cp is top-reducible. This situation does exist by running 
experiments: tm-reducing cp will result a redundant sig-polynomial sp which is super 
top-reducible another computed sig-polynomial. But the order can be employed for 
the proof of the termination of the F5B algorithm. Assume the algorithm has created 
the S-Grobner basis SQ after finite while-loops. Let spi and spj be two sig-polynomials 
in SQ' such that i < j i.e., spt appears earlier in SQ' than spj. We call (spi,spj) a 
misplaced pair if LM(spi) ~<i LM(spj). Note that we always order spi before spj in 
the misplaced pair. Clearly, the misplacement is the reason for the J-pair of the form 
mspj . 

Definition 20. Let (spi,spj) and (spk, spi) be two misplaced pairs. And define (spi,spj) -< 
(spk, spi), if one of the following cases is satisfied. 

(1) LM(spi) ^ LM(sp k ) 

(2) LM(spi) <i LM(sp k ) and LM(s Pj ) LM(spi) 

If each J-pair mspj is either ts-rewritable by PSyz or F5- rewritable by SQ' , we call 
the misplaced pair (spi,spj) is corrected. 
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Theorem 21. For any finite subset F of polynomials in R, the F5B algorithm terminates 
after finitely many steps and it creates a Grobner basis for the ideal X =< F >. 

Proof. We still proceed by induction on the top-irreducible signature s. If s = e, is 
the smallest top-irreducible signature, the initialized PSyz USG' is the S-Grobner basis 
^<.(e<)- 

Let s > e i} and suppose that PSyzUiSC?' created by the F5B algorithm is PSyz <s ( s -> U 
SG' <3 ( S ) = SQ <g ( s ) after finitely many while-loops. If s = e^, where 1 < j < d, j i, 
there is only one sig-polynomial (ej,fj) in SQ' <s ^ e ^ with top-irreducible signature e^. 
And if (ej,fj) is tm-irreducible by SG <g{e . } , PSyz <s(ej) U5^' <s(ej) is SG< g{e . } . If (e,-,/,-) 
is tm-reducible by SG< s ( e ), during an execution of the while-loop, line 6 will create a 
J-pair cp = (ej,fj) and cp is neither ts-rewritable by PSyz < ^ ^ nor F5-rewritable by 
SG <3 r e .y Tm-reducing cp repeatedly by SG< s ( ej ) at line 8 results a top-irreducible sig- 
polynomial sp with signature ej because ej is top-irreducible. Thus, SG< B ( e ) can be 
obtained. If s ^ e^, we can also obtain a J-pair cp' with signature s at line 6 and cp' 
is neither ts-rewritable by PSyz <g ^ nor F5-rewritable by SQ'< s r s ) by Lemma 19. After 
that, a top-irreducible sig-polynomial sp with signature s will be created. Because top- 
irreducible signatures are finite in SV, after finitely many steps, the algorithm generates 
an S-Grobner basis PSyz U SG' = SG for SV. 

If there are J-pairs in CPs at this time, a new cp" — m(ufe, g/-) — mspk may pass the 
criteria and thus generating a new tm-irreducible sig-polynomial sp n in SG' ■ There must 
exist a top- irreducible sph in SG' such that sph can super top-reduce sp n and (sph, spu) 
is a misplaced pair. That is, LM(sph) =i LM{sp n ) -<i LM(spk) and h < k < n. On the 
one hand, the J-pairs of sp n and other possible sig-polynomials, be of the form m'sp n or 
not, will generate tm-irreducible sig-polynomials, say, sp p with ^-smaller leading pairs if 
it passes the criteria of the F5B algorithm. Since the leading pair of sp p is equal to that of 
a top-irreducible sig-polynomial and the top-irreducible sig-polynomials in SV are finite, 
this process of creating a J-pair and generating a sig-polynomial always terminates. On 
the other hand, after finite steps, the misplaced pair (sph, spk) will be corrected. Though 
an insertion of a new tm-irreducible sig-polynomial may produce other misplaced pairs, 
the -< pm -maximum misplaced pair of SG' without being corrected is gradually decreasing 
with respect to the order -< pm . As there are finite pairs not -< pm -equal, the algorithm 
will terminate finally and output a Grobner basis for I =< F >. □ 



7. Proof of the termination of the F5 algorithm 

In the original F5 algorithm in Faugerei ( 20021 ) , the input polynomials in F = { f\ , . . . , fa } 



are homogeneous, and after initialization, sig-polynomials are (ei, /i), . . . , (e^, fd). A 
property follows: If sp = (u,g) 6 NSP and idx(u) = i, 1 < i < d, then deq (lm(u)) + 
deg(lm (fj)) — deg(g). We define the g-weighted degree the same with that in lGao et al 



(|2010l ): The g-weighted degree gw — deg of a sig-polynomial sp = (u, g) is equal to 
deg(lm(u)) + deg(lm(fid x (u)))- Therefore, selecting critical pairs of the minimal degree 
in the original F5 algorithm equals selecting J-pairs of the minimal g-weighted degree. 
For an admissible monomial order < m , we define the admissible module order < So as 
follows. 

We say that i"e, < So x^ej if 
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(1) * < 3, 

(2) i = j and gw — deg(x a ei) < gw — deg(x l3 ej), 



(3) i = j , gw — deg(x a ei) = gw — deg(x^ej) and x a < m x$ 
Particularly, we have x a ei = So x@ej, if i = j and x a = x@. 

Sure enough, the order < So is an admissible module order. By using t his order < Sn , w e 
can understand the reformulation of the original F5 algorithm easier. In lFaugerd(|2002h . 



Faugere buildcd up an array Rule to store the ordering of sig-polynomials on which the 
F5-rewritten criterion is based. As presented in the following pseudo code, we will just 
discard the Rule and store the ordering directly in SQ' . 

Though the F5B and original F5 algorithms share the same F5-rewritten criterion, 
the ordering in SG' of the F5B algorithm slightly differs from that in Rule of the F5 
algorithm. In the F5B algorithm, let sp\ and spi be two sig-polynomials of the same 
index in SQ' . If s spi < s s sp2 , sp\ must appear earlier in SQ' than spg . This is also 



interpreted as an isRewritten criterion in Hashemi and M.-Alizadebl ( 2011 ). However, in 



the original F5 algorithm, the claim is n ot true for sig -polynomials. Since the Rule is 
updated not only in the Spol function of Faugere ( 20021) but also in the TopReduction 



function, at the end of each run though the while-loop, the newly added sig-polynomials 
in Rule have the same index. Moreover, the g-weighted degrees of them are equal as 
the input polynomials of the original F5 algorithm are homogeneous. Then there is no 
guarantee that the sig-polynomials are arranged in < Sa -descending order (note that the 
original F5 algorithm insert new sig-polynomials at the beginning of Rule). By running 
several examples, this non-monotony in Rule is verified. 

Nevertheless, a weaker relation exists between sig-polynomials in Rule. During an 
execution of the while-loop in the original F5 algorithm, let d be the minimal degree of 
critical pairs. The sig-polynomials added in Rule are all of g-weighted degree d in the Spol 
and TopReduction functions. Hence if two sig-polynomials spi and spi in Rule are of the 
same index satisfying gw — deg(spi) < gw — deg^spz), then sp± appears earlier in Rule 
than sp2- Besides, if a J-pair cp of two non-syzygy sig-polynomials sps and sp^ passes 
criteria of the original F5 algorithm and it is F5-reduced 2 1 to sp$ , then sp$ appears later 
than sp3 and sp^. Here the latter property plays an important part in the proof below. 

The following is the F5GEN algorith m (F5 algorithm with a generalized insertion 
strategy) derived from the original one in IFaugere ( 2002 ). It use the same F5- rewritten 



criterion as the previ o us on es. Here we still omit F5-rewritable check when tm-reducing 



J-pairs as in IFaugere (2002) 



In the insert_F5GEN function of the F5GEN algorithm, we can restrict an appropriate 
strategy of insertion such that the ordering in SQ' is the same as that in Rule of the 
original F5 algorithm. The idea for constructing signature-based algorithms also for non- 
homogeneous polynomial ideals has been mentioned in Eder and Perry's earlier papers. 
We shall see that this F5GEN algorithm here is true for any polynomial ideals both 
homogeneous and non-homogeneous, admissible module orders other than < so and the 
weak condition of ordering in SQ' mentioned in the above pseudo code. But once the 
input polynomials are homogeneous and the admissible module order < so is chose, the 
F5GEN algorithm with an appropriate strategy of insertion will simulate the original F5 
algorithm accurately. Together with t he analysis of e q uivalen ce between the original F5 
algorithm and the F5B algorithm in Sun and Wand ( 2011a ). the proof of termination 



Here, F5-reducing means using F5-rewritable check and tm-reducing. 
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Algorithm 7 The F5GEN Algorithm (F5 algorithm with a generalized insertion strat- 
egy) 

l: inputs: 

F = {fi, . . . , fd} G R, a list of polynomials 
< m an admissible monomial order on M. 

< s , an admissible module order on Add which is compatible with < m 

^i, an order on LM(SV*) 
2: outputs: 

Qi, a Grobner basis for I =< fx, ■ ■ ■ , fd > 
3: interreduce F and F :=sort({/i, . . . , f d }, < m ), F { = (e it fi) for i = 1, . . . , d 
4: init2: 

CPs :=sort({ J - pair[F u Fj] | 1 < i < j < d}, < s ), SQ' = {Fi | i = 1, . . . , d) and 
PSyz - {{JiBj - fje h 0) 1 1 < i < j < d} 
5: while CPs / do 

6: cp :=min({cp G CPs}, < s ) and CPs := CPs\{cp} 

7: if cp is neither ts-rewritable by PSyz nor F5-rewritable by SQ' then 

8: cp -£-> sp = (u, g) 

SQ 

9: SQ' :=insert_F5GEN(sp, SQ' ', cp) 

10: if g ^ then 

11: CPs :=sort(CPs U { J - pair(sp, sp') \Vsp' G Gi, sp' 7^ sp}, <«)= 

{m5G'(fc)} and store only one J-pair for each distinct signature of which the first 
component has maximum index k in SQ' 

12: PSyz := PSyz U {{gui — giu,0) \ (u;,<#) G Gi} and discard those super 

top-reducible in PSyz 

13: return {g | (u, g) G SQ' \ Syz} 



Algorithm 8 inscrt_F5GEN 
l: inputs: 

sp, a sig-polynomial 
SQ' : =5e'(0 = {(ui,5i),...,(u r;5r )} 
cp = m(uk,gk), the J-pair which is tm-reduced to sp 
2: find the first index % and the last index j e in SQ' such that idx(sp) — idx(SQ' (jb)) = 
idx(SQ'(j e )) 

3: insert sp into SQ' after SQ' {i) , where jb — 1 < « < J e , such that sp appears later in 

SQ' than sp k = (u k ,g k ) 
4: return 



and correctness for this F5GEN algorithm can be used to prove the termination and 



correctness of the original algorithm in iFaugerd ([2002) 



Lemma 22. Let s be a signature in sig{SV*) such that s ^ e^, for any 1 < i < d. During 
an execution of the while-loop in the F5GEN algorithm, let PSyz <s ( s -) and SQ < u-\ be 
the values o/PSyz and SQ' . If s is top-irreducible, then s is the signature of a J-pair cp 
of two non-syzygy sig-polynomials in SQ <s / s \ with smaller signatures and cp is neither 
ts-rewritable by PSyz <s ^ s -j nor F5-rewritable by SG <B uy 
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Proof. By Theorem 13, there exists a J-pair cp' = m'(vLk,gk) of two non-syzygy top- 
irreducible sig-polynomials with smaller signatures such that s = lm(m'uk) and cp' 
is not ts-rewritable by SQ <B ( s y If cp' is F5-rewritable by SG <3 ( S \, let (uj, gj) be the 
last non-syzygy sig-polynomial in SG' <s ( s ) with the signature dividing s according to 
the structure of the F5GEN algorithm. As s is top-irreducible signature, m(uj,gj) can 
be tm-reduced by some non-syzygy top-irreducible sig-polynomial (\it,gt) in SQ' <3 ^ s y 
Denote by m*(\ij, gj) the J-pair of (vij,gj) and (u t , <? t ), where to* \ to. 

Assume for a contradiction that to* properly divides m. It can be deduced that 
m*(uj, gj) is neither ts-rewritable by PSyz <s ( s -, nor F5-rewritable by SQ' <s ^ s y After a 
sequence of tm-reduction on m*(\ij,gj), we get a tm-irreducible sig-polynomial (u v ,g v ). 
Because of the insertion strategy of the F5GEN algorithm, (u v ,g v ) must appear later in 
SQ <a / s ^ than (uj, gj), which contradicts the fact that (\ij,gj) F5-rewrites cp'. Therefore, 
to* = to, that is, cp = (mUj ,mgj) is the J-pair of two non-syzygy sig-polynomials with 
smaller signatures such that s = lm(mUj) = lm(u') and cp is neither ts-rewritable by 
PSyz <s ( s ) nor F5-rewritable by SQ' <s ^ s y □ 



For the original F5 algorithm, Gash iGashl (|2009D made a conjecture that there is 



not a sig-polynomial in SQ' super top-reducible by another one. But this can not be 
satisfied sometimes. Here we can not guarantee the reverse direction of Lemma 22 is 
satisfied too. It is highly possible that there exist a misplaced pair (spi,spj) in SQ' as 
the insertion strategy of the F5 algorithm (it can be seen as a implementation of the 
F5GEN algorithm) is different from the F5G. From the proof of Theorem 21, we know 
that LM(sp) -(i LM(sp') -<i LM(sp") if the sig-polynomial sp is the result tm-reduced 
from a J-pair of sp' and sp" . A J-pair of the form mspj may pass the criteria and be 
reduced to m' spi since LM(spi) -<i LM(spj). The sig-polynomial spi is added earlier in 
SQ' than spj and spi can not be selected in the F5-rewritable function. So both spi and 
m'spi are kept in SQ' , a contradiction. One can verify this situation by running several 
examples. 

Theorem 23. For any finite subset F of polynomials in R, the F5GEN algorithm ter- 
minates after finitely many steps and it creates a Grobner basis for the ideal T —< F >. 



Proof. Again, we proceed by induction on the top-irreducible signature s and let e, be 
the smallest top-irreducible signature. The case s = e; is trivial. 

Let s > e,, and suppose that PSyz USQ' created by the F5GEN algorithm is SQ <s ^ s - ) 
after finitely many while-loops. If s = e^, 55< s ( ej ) can be obtained in similar fashion 
with the proof of the F5B algorithm. If s ^ ej, we can also obtain a J-pair cp' with 
signature s at line 6 and cp' is neither ts-rewritable by PSyz <s ( s -) nor F5-rewritable by 
SQ' <3 ( s j by Lemma 22. After that, a top- irreducible sig-polynomial sp with signature s 
will be created. Because top-irreducible signatures are finite in SP, after finitely many 
steps, the algorithm generates an S-Grobner basis PSyz U SQ' = SQ for SV. 

If there are J-pairs in CPs at this time, the leading pair of a newly generated sig- 
polynomial which is tm-reduced from the J-pair cp, is ^(-smaller than two components of 
cp. On the one hand, by the insertion strategy of the F5GEN algorithm and leading pair 
of generated sig-polynomials are ^<;-equal to that of top-irreducible sig-polynomials, a 
branch of creating a J-pair and generating a sig-polynomial will end finitely. On the other 
hand, after finite steps, a misplaced pair will be corrected. Though an insertion of a new 
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tm-irreducible sig-polynomial may produce other misplaced pairs, the -< pm -maximum 
misplaced pair of SQ without being corrected is gradually decreasing with respect to the 
order -< pm . As there are finite pairs not -< pm -equal, the algorithm will terminate finally 
and output a Grobner basis for X =< F >. □ 



Therefore, for any finite set of homogeneous polynomials, the original F5 algorithm 
Faugerd ( 2002 ) terminates finitely and it creates a Grobner basis for the polynomial 



ideal. 



8. Conclusion 

This paper present a clear proof of the termination of the GVWHS, F5B and F5 
algorithms under the condition that the admissible monomial order and the admissible 
module order are compatible. Of course, there exist some optimizations for improving 
the efficiency, like recording (lm(u),g) for each (u,g) in the implementation. These op- 
timizations do not affect the correctness and termination. One may find out that the 
F5G ,F5B and original F5 algorithms are implementations of the F5GEN algorithm with 
different insertion strategy. That means, the GVWHS algorithm is just an F5-like algo- 
rithm. Moreover, with this proved F5GEN algorithm, researchers can shift their focus on 
the different variants of the F5GEN algorithm and find out the fastest one. 
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